Guidance for Managing Terrorism Risks and Protective Security

Edinburgh Hindu Mandir & Cultural Centre

Guidance for Managing Terrorism Risks and Protective Security

Document status: EHMCC Committee Guidance
Applies to: Trustees/Committee Members, employees, priests, volunteers, contractors, hirers and event organisers
Review: At least annually and following any significant incident, change in premises or change in Government guidance


1. Purpose

The Edinburgh Hindu Mandir & Cultural Centre (“EHMCC”) is committed to providing a safe, welcoming and inclusive environment for devotees, visitors, volunteers, staff, priests, contractors and members of the wider community.

As a place of worship and community facility, EHMCC recognises that religious premises may be vulnerable to terrorism, hate crime and other security threats.

The purpose of this guidance is to:

  1. identify and manage terrorism-related risks;
  2. protect people using EHMCC premises;
  3. provide clear procedures for responding to a suspected or actual terrorist incident;
  4. ensure that volunteers and staff understand what they should do in an emergency;
  5. support effective coordination with Police Scotland, emergency services, the local authority and other relevant organisations;
  6. ensure that security arrangements are proportionate and reasonably practicable;
  7. support EHMCC’s responsibilities as a charitable organisation and place of worship.

This document should be read alongside EHMCC’s existing fire safety, safeguarding, emergency, health and safety and event-management procedures.


2. Legal and Regulatory Context

The UK Government has introduced the Terrorism (Protection of Premises) Act 2025, which establishes a legal framework for protecting publicly accessible premises and events against terrorism.

The Home Office published statutory guidance in April 2026, with subsequent updates. The Act is intended to ensure that those responsible for relevant premises consider appropriate measures to reduce the risk of physical harm from terrorism.

The Act uses a tiered approach.

For qualifying premises, premises with 200–799 people are generally standard-tier premises, while premises capable of having 800 or more people can ordinarily fall into the enhanced tier.

However, places of worship have special treatment and remain standard-tier premises even where 800 or more people may reasonably be expected to be present, provided the premises meet the qualifying criteria.

The substantive requirements of the Act have not yet commenced and therefore EHMCC should not represent this document as evidence that it is currently legally compliant with the Act. Instead, this guidance establishes EHMCC’s preparedness and good practice in anticipation of the legislation coming into force.

EHMCC should continue to monitor Government guidance and update this document when the legislation comes into force.


3. EHMCC’s Approach

EHMCC will adopt a proportionate, risk-based approach.

The objective is not to create a security environment that discourages worshippers or unnecessarily restricts access to the Mandir.

Instead, EHMCC will seek to:

  • understand the risks;
  • reduce vulnerabilities;
  • maintain appropriate vigilance;
  • prepare volunteers and staff;
  • have clear emergency procedures;
  • work with Police Scotland and other emergency services;
  • review security arrangements for large events;
  • learn from incidents and near misses.

Security measures should be proportionate to the assessed risk and reasonably practicable. The Home Office guidance specifically describes “reasonably practicable” as requiring consideration of the effectiveness of measures alongside their cost, time and difficulty of implementation.


4. Terrorism Risk Assessment

EHMCC should maintain a written terrorism and protective-security risk assessment.

The assessment should consider:

4.1 Potential threats

Examples include:

  • vehicle attacks;
  • attacks involving weapons;
  • suspicious packages;
  • hostile reconnaissance;
  • arson or deliberate fire-setting;
  • attacks targeting worshippers or community events;
  • attacks motivated by religious or racial hatred;
  • threats made against EHMCC;
  • attacks occurring in the immediate vicinity;
  • terrorism-related disruption or threats received online or by telephone.

The purpose is not to predict a particular attack but to identify vulnerabilities and prepare sensible responses.

4.2 Vulnerabilities

The assessment should consider:

  • entrances and exits;
  • doors and access points;
  • windows;
  • congregation areas;
  • reception areas;
  • queues;
  • car parks and vehicle access;
  • areas where large numbers of people gather;
  • kitchens and service areas;
  • storage areas;
  • CCTV coverage;
  • lighting;
  • external boundaries;
  • public information displayed online;
  • arrangements for large events;
  • arrangements for contractors and external hirers.

4.3 Impact

The assessment should consider potential consequences including:

  • injury or loss of life;
  • panic and crowd movement;
  • inability to evacuate;
  • disruption to worship;
  • damage to buildings;
  • reputational damage;
  • financial loss;
  • impact on volunteers and the wider community.

5. Responsible Person and Security Lead

The EHMCC Executive Committee should designate:

A. Responsible Committee Member

A committee member should have overall responsibility for terrorism-risk preparedness.

B. Security/Counter-Terrorism Lead

EHMCC should nominate an individual to coordinate:

  • risk assessments;
  • security procedures;
  • volunteer awareness;
  • emergency exercises;
  • liaison with Police Scotland;
  • liaison with event organisers;
  • review of incidents and concerns.

The roles may be undertaken by the same person if appropriate.

A deputy should also be identified.


6. Working with Police Scotland

EHMCC should maintain appropriate contact with Police Scotland and seek specialist advice where necessary.

Where appropriate, EHMCC should request advice from specialist counter-terrorism/security advisers concerning:

  • the Mandir building;
  • major religious festivals;
  • large public events;
  • crowd management;
  • hostile reconnaissance;
  • suspicious behaviour;
  • protective security improvements.

EHMCC should not attempt to undertake specialist counter-terrorism assessments itself where professional advice is available.

Government protective-security guidance for places of worship recommends understanding threats, vulnerabilities and potential impact and contacting specialist Counter Terrorism Security Advisers where appropriate.


7. Security Awareness

All regular volunteers, staff and committee members should understand the principle:

“See it – Check it – Report it”

People should be encouraged to report:

  • suspicious behaviour;
  • unusual activity;
  • unattended items;
  • unexplained vehicles;
  • attempts to obtain unnecessary information about security arrangements;
  • threats;
  • concerning communications;
  • repeated unusual visits or photography where this appears connected to hostile reconnaissance.

Staff and volunteers should not confront or challenge a person whom they suspect may pose a terrorist threat unless this is necessary for immediate safety.

Their priority should be to keep themselves and others safe and report concerns appropriately.


8. Hostile Reconnaissance

Potential attackers may conduct research before an attack.

EHMCC should therefore be alert to unusual attempts to obtain information about:

  • security arrangements;
  • CCTV;
  • opening and closing times;
  • number of volunteers;
  • emergency procedures;
  • access-controlled areas;
  • security weaknesses;
  • major events;
  • crowd numbers.

EHMCC should avoid unnecessarily publishing detailed security information online.

Information such as the location of CCTV cameras, security systems, access-control arrangements and emergency procedures should not normally be publicly disclosed.


9. Access and Physical Security

EHMCC should consider proportionate measures including:

  • secure external doors;
  • appropriate locks;
  • controlled access to non-public areas;
  • suitable lighting;
  • CCTV where appropriate;
  • secure storage;
  • maintaining clear emergency exits;
  • preventing unauthorised access to restricted areas;
  • monitoring unusual activity;
  • ensuring doors are not unnecessarily propped open.

Security arrangements should not compromise fire safety or accessibility.

Any security measure must be compatible with EHMCC’s fire-risk assessment and other legal safety requirements.


10. Suspicious Items

If an unattended or suspicious item is discovered:

DO:

  • do not touch or move it;
  • move people away from the immediate area;
  • inform the responsible person;
  • contact Police Scotland where appropriate;
  • follow instructions from emergency services;
  • keep people away from the area.

DO NOT:

  • touch, open or move the item;
  • use a mobile phone immediately next to a suspicious item if doing so could create additional risk;
  • attempt to investigate the item;
  • allow people to gather around it.

If there is an immediate threat, call 999.


11. Emergency Procedures

EHMCC should maintain clear procedures for four key protective responses:

11.1 Evacuation

Moving people away from danger to a place of safety outside the affected area.

Evacuation procedures should identify:

  • primary exits;
  • alternative exits;
  • assembly arrangements;
  • arrangements for people requiring assistance;
  • responsibilities of volunteers;
  • arrangements for checking areas where appropriate.

11.2 Invacuation

Moving people away from danger to a safer location within the building.

This may be appropriate where leaving the building would expose people to greater danger.

11.3 Lockdown

Preventing or restricting access to the building or particular areas where remaining inside is safer than moving outside.

11.4 Communication

Providing clear and timely information to people present.

The Home Office identifies evacuation, invacuation, lockdown and communication as key public-protection procedures for premises within the relevant duties.


12. If an Attack Occurs

The immediate priority is:

RUN – HIDE – TELL

Where appropriate and safe to do so:

RUN

  • Move away from the danger.
  • Use the safest available route.
  • Encourage others to move away.
  • Do not stop to collect personal belongings.

HIDE

If escape is not possible:

  • find a place of safety;
  • secure or barricade the location if possible;
  • stay out of sight;
  • silence mobile phones;
  • remain quiet;
  • follow instructions from Police Scotland.

TELL

When safe:

  • call 999;
  • provide your location;
  • describe what has happened;
  • provide information about the attacker or threat if known;
  • follow instructions from the emergency services.

Volunteers should not attempt to act as security officers or confront an attacker unless necessary to protect life and there is no safer alternative.


13. Emergency Communication

EHMCC should establish a clear chain of communication.

During an incident:

  1. contact emergency services where appropriate;
  2. follow Police Scotland instructions;
  3. the designated EHMCC responsible person should coordinate internal communication where practicable;
  4. volunteers should avoid spreading unverified information;
  5. only authorised individuals should communicate with the media on behalf of EHMCC.

Social-media posts during an incident should not disclose information that could compromise the safety of worshippers, emergency responders or security personnel.


14. Large Religious Events

Additional planning should be undertaken for events where significantly larger numbers of people are expected.

This includes, for example:

  • Navratri;
  • Diwali;
  • Rath Yatra;
  • Janmashtami;
  • Maha Shivratri;
  • Dussehra;
  • major religious ceremonies;
  • VIP visits;
  • community festivals;
  • external events involving large crowds.

For major events, EHMCC should consider:

  • expected attendance;
  • entry and exit arrangements;
  • queues;
  • traffic and vehicle access;
  • emergency access;
  • stewarding;
  • first aid;
  • communications;
  • evacuation arrangements;
  • weather-related crowd issues;
  • arrangements for children and vulnerable persons;
  • liaison with Police Scotland and other authorities where appropriate.

Where an event is held away from the Mandir, the event organiser and venue operator should clearly establish who is responsible for security and emergency arrangements.


15. Events and External Hirers

Any organisation hiring EHMCC facilities should be required to comply with EHMCC’s relevant safety and security requirements.

For larger events, EHMCC should establish:

  • expected attendance;
  • organiser contact details;
  • event timings;
  • access arrangements;
  • emergency arrangements;
  • responsibility for stewarding;
  • responsibility for communicating emergency instructions.

EHMCC should reserve the right to require additional security or safety arrangements where the risk assessment identifies a need.


16. Volunteers

Volunteers are an important part of EHMCC’s security arrangements.

Volunteers should be encouraged to:

  • remain alert without becoming suspicious of ordinary worshippers;
  • report concerns promptly;
  • know emergency exits;
  • understand evacuation arrangements;
  • know who the responsible person is;
  • assist vulnerable people where safe to do so;
  • follow Police Scotland and emergency-service instructions.

Volunteers should never be expected to place themselves in unnecessary danger.


17. Children and Vulnerable People

Emergency planning should consider people who may require additional assistance, including:

  • children;
  • elderly people;
  • people with disabilities;
  • people with mobility difficulties;
  • people who may not understand emergency instructions;
  • visitors unfamiliar with the building.

Where appropriate, event organisers should identify suitable arrangements for assisting such people.


18. CCTV and Security Systems

Where CCTV or other security systems are installed, EHMCC should ensure that:

  • systems are maintained;
  • recording arrangements are understood;
  • footage is stored securely;
  • access is restricted to authorised individuals;
  • footage can be provided to Police Scotland when legally appropriate;
  • signage and data-protection requirements are followed.

Security systems should be reviewed periodically to ensure that they remain effective.


19. Threats and Suspicious Communications

Any threat received by:

  • telephone;
  • email;
  • letter;
  • social media;
  • website;
  • messaging service;
  • in person;

should be treated seriously and recorded.

The recipient should preserve the original message or communication where possible and report it to the appropriate responsible person.

Where there is an immediate threat to life or safety, 999 should be called without delay.

Threats should not be circulated unnecessarily among volunteers or members of the community.


20. Prevent, Extremism and Speakers

As a charitable religious organisation, EHMCC must ensure that its premises, events, money and activities are not used to support terrorism or unlawful extremist activity.

The Charity Commission’s updated guidance specifically applies to religious charities and addresses risks involving charity events, speakers, literature and the use of charity premises. It emphasises trustees’ responsibilities to protect the charity, act lawfully and maintain public trust and confidence.

Accordingly:

  • speakers should be appropriately considered before being invited;
  • EHMCC should understand the purpose and subject matter of significant events;
  • EHMCC should not knowingly provide its premises or resources for terrorist or unlawful extremist activity;
  • concerning literature should be reported to the Committee;
  • organisers should ensure that events remain consistent with EHMCC’s charitable purposes and applicable law.

EHMCC should distinguish between legitimate religious, political or social discussion and material that crosses into support for terrorism or other unlawful activity.


21. Online and Social Media

EHMCC should maintain appropriate control over official social-media accounts and websites.

The organisation should avoid publishing:

  • detailed security arrangements;
  • emergency response plans;
  • locations of security equipment;
  • information that could assist hostile reconnaissance.

Threatening or concerning online communications relating to EHMCC should be preserved and reported appropriately.


22. Incident Reporting

All significant security incidents and near misses should be recorded.

The record should include:

  • date and time;
  • location;
  • description of incident;
  • people involved;
  • immediate action taken;
  • whether emergency services were contacted;
  • outcome;
  • lessons learned;
  • further action required.

Records should be kept securely and only shared with people who need the information.


23. Training and Exercises

EHMCC should provide appropriate security awareness training to relevant volunteers, staff and committee members.

Training should cover:

  • recognising suspicious behaviour;
  • suspicious items;
  • emergency communication;
  • evacuation;
  • invacuation;
  • lockdown;
  • emergency-service contact;
  • incident reporting.

Practical exercises should be undertaken periodically, particularly before major events.

Exercises should be proportionate and should not unnecessarily alarm worshippers.


24. Coordination with Existing Safety Arrangements

Terrorism preparedness should not operate separately from EHMCC’s existing safety arrangements.

The following should be coordinated:

  • fire safety;
  • first aid;
  • safeguarding;
  • emergency evacuation;
  • health and safety;
  • event management;
  • security;
  • communications;
  • business continuity.

For example, an evacuation route must remain suitable both for fire emergencies and terrorism-related incidents, while recognising that the safest response may differ depending on the nature and location of the threat.


25. Business Continuity

EHMCC should consider how it would operate following a serious security incident.

Considerations may include:

  • temporary closure;
  • alternative worship arrangements;
  • communication with members;
  • insurance notification;
  • safeguarding of records;
  • financial consequences;
  • support for volunteers and affected individuals;
  • building inspection;
  • liaison with Police Scotland and other authorities;
  • reopening arrangements.

26. Review of Security Arrangements

The Executive Committee should review this guidance:

  • at least annually;
  • following a serious incident;
  • following a significant security concern;
  • following a major change to the building;
  • following a significant change in the use of the premises;
  • before major events where appropriate;
  • when Government legislation or guidance changes.

The terrorism risk assessment should also be reviewed periodically.


27. Contact and Escalation

Immediate danger / emergency

Police Scotland / Emergency Services: 999

Non-emergency police contact

Police Scotland: 101

EHMCC internal reporting

Security concerns should be reported promptly to the designated EHMCC Security/Counter-Terrorism Lead or another committee member.

No volunteer should feel that they need to establish whether something is definitely terrorism before reporting a genuine concern.


28. Committee Responsibilities

The EHMCC Executive Committee should:

  1. ensure that terrorism risks are considered within the organisation’s overall risk-management framework;
  2. maintain appropriate written procedures;
  3. appoint a responsible person/security lead;
  4. ensure relevant volunteers receive appropriate awareness training;
  5. review security arrangements before major events;
  6. maintain appropriate liaison with Police Scotland and relevant authorities;
  7. ensure that security measures remain proportionate;
  8. record significant incidents and lessons learned;
  9. review this guidance annually;
  10. monitor developments concerning the Terrorism (Protection of Premises) Act 2025.

29. Key Principle

EHMCC’s approach should be:

“Prepared, proportionate and welcoming.”

The purpose of terrorism-risk management is not to create fear or restrict normal religious activity.

The purpose is to ensure that EHMCC is prepared to protect life, respond effectively to an emergency and continue providing a safe and welcoming place of worship for the community.


Appendix A – Quick Action Card

If you see something suspicious:

1. Do not put yourself at risk.

2. Report the concern.

3. Do not confront a suspected attacker.

4. If there is immediate danger, call 999.

If there is an attack:

RUN – HIDE – TELL

If you find a suspicious item:

DO NOT TOUCH IT.

Move away and report it.

If Police or emergency services arrive:

Follow their instructions immediately.


Appendix B – EHMCC Annual Security Checklist

The Committee should confirm annually that:

☐ Terrorism risk assessment has been reviewed.

☐ Emergency procedures have been reviewed.

☐ Evacuation routes remain clear.

☐ Volunteers know emergency procedures.

☐ Emergency contacts are current.

☐ CCTV/security systems have been checked.

☐ External doors and access arrangements have been reviewed.

☐ Major-event security arrangements have been considered.

☐ Police Scotland/security advice has been sought where appropriate.

☐ Suspicious-item procedure is understood.

☐ Emergency communication arrangements are understood.

☐ Incident-reporting arrangements are in place.

☐ Relevant staff/volunteers have received appropriate awareness training.

☐ Any lessons from previous incidents have been incorporated.

☐ Government guidance concerning the Terrorism (Protection of Premises) Act 2025 has been reviewed.

Date of review: _01/06/2026_________________

Reviewed by: Samir Desai__________________

Next review date: 01/06/2027__________________